Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/sctp/socket.c sctp_sendmsg() -> sctp_sendmsg_check_sflags()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | asoc | 4096-ptr_max |
| PARAM_VALUE | 1 | sflags | 64-u16max |
| PARAM_VALUE | 2 | msg | 4096-ptr_max |
| BUF_SIZE | 2 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 2 | msg->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 2 | msg->msg_ubuf | (-1),16 |
| CAPPED_DATA | 0 | &asoc->asocs | 1 |
| CAPPED_DATA | 3 | msg_len | 1 |
| CAPPED_DATA | 3 | msg_len | 1 |
| DATA_SOURCE | 2 | msg | $1 |
| DATA_SOURCE | 3 | msg_len | $2 |
| BIT_INFO | 1 | sflags | 0x40,0xffff |
| NOSPEC | 2 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | msg->msg_controllen | 0-s32max[c] |
| USER_DATA | 2 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 2 | msg->msg_iter.count | 0-u64max |
| USER_DATA | 2 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 2 | msg->msg_namelen | 0-128 |
| USER_DATA | 2 | *msg->msg_name | s64min-s64max |
| USER_DATA | 3 | msg_len | 0-u64max[c] |
| UNITS | 3 | msg_len | unit_byte |
| USER_PTR | 2 | msg->msg_control | |
| USER_PTR | 2 | msg->msg_name | |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/sctp/socket.c sctp_sendmsg() -> sctp_sendmsg_check_sflags()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | asoc | 4096-ptr_max |
| PARAM_VALUE | 0 | asoc->ep | 4096-ptr_max |
| PARAM_VALUE | 2 | msg | 4096-ptr_max |
| BUF_SIZE | 2 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 2 | msg->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 2 | msg->msg_ubuf | (-1),16 |
| CAPPED_DATA | 3 | msg_len | 1 |
| CAPPED_DATA | 3 | msg_len | 1 |
| DATA_SOURCE | 0 | asoc | r sctp_endpoint_lookup_assoc |
| DATA_SOURCE | 2 | msg | $1 |
| DATA_SOURCE | 3 | msg_len | $2 |
| NOSPEC | 2 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | msg->msg_controllen | 0-s32max[c] |
| USER_DATA | 2 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 2 | msg->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 2 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 2 | msg->msg_namelen | 0-128 |
| USER_DATA | 2 | *msg->msg_name | s64min-s64max |
| USER_DATA | 3 | msg_len | 0-u64max[c] |
| UNITS | 3 | msg_len | unit_byte |
| USER_PTR | 2 | msg->msg_control | |
| USER_PTR | 2 | msg->msg_name | |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |
net/sctp/socket.c sctp_sendmsg() -> sctp_sendmsg_check_sflags()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | asoc | 4096-ptr_max |
| PARAM_VALUE | 2 | msg | 4096-ptr_max |
| BUF_SIZE | 2 | msg->msg_control | (-1)-0,16,24,36-s32max |
| BUF_SIZE | 2 | msg->msg_name | (-1)-0,12,28,128 |
| BUF_SIZE | 2 | msg->msg_ubuf | (-1),16 |
| CAPPED_DATA | 3 | msg_len | 1 |
| CAPPED_DATA | 3 | msg_len | 1 |
| DATA_SOURCE | 0 | asoc | r sctp_id2assoc |
| DATA_SOURCE | 2 | msg | $1 |
| DATA_SOURCE | 3 | msg_len | $2 |
| NOSPEC | 2 | msg->msg_iter.count | |
| RX_PATH | |||
| TASK_NOT_RUNNING | |||
| USER_DATA | 2 | msg->msg_controllen | 0-s32max[c] |
| USER_DATA | 2 | msg->msg_flags | 0-u32max[c] |
| USER_DATA | 2 | msg->msg_iter.count | 1-18446744073709551614 |
| USER_DATA | 2 | msg->msg_iter.iov_offset | 0-u64max[c] |
| USER_DATA | 2 | msg->msg_namelen | 0-128 |
| USER_DATA | 2 | *msg->msg_name | s64min-s64max |
| USER_DATA | 3 | msg_len | 0-u64max[c] |
| UNITS | 3 | msg_len | unit_byte |
| USER_PTR | 2 | msg->msg_control | |
| USER_PTR | 2 | msg->msg_name | |
| LOCK2 | sk | ||
| HALF_LOCKED2 | &vq->mutex |